$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft File: 91C6B644DD6D84839ED120FBC00984D60495C8C4.mft (raw, json) Hash identifier: ulo8j6KSgcQ8vgLZoIZFz1amg2rKgf+LlrCQxrrqO/M= Subject key identifier: 01:C6:51:AE:00:E9:CE:36:C6:7E:C7:08:44:38:0F:30:8A:5D:44:04 Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Certificate serial: 7BCD388A5F7B0F3937557D4BC7E30218CC81E5DF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft Manifest number: 03 Signing time: Mon 13 Apr 2026 06:23:29 +0000 Manifest this update: Mon 13 Apr 2026 06:18:29 +0000 Manifest next update: Tue 14 Apr 2026 08:35:29 +0000 Files and hashes: 1: 3131362e3235352e3132382e302f31372d3137203d3e2034383337.roa (hash: OIQNHYoSLKIBpe7rvo4tbhbbjhiqeDEZ0gkKtToT+JM=) 2: 3131342e36362e33322e302f31392d3139203d3e20313336313838.roa (hash: X8tfx6VvzuOMYA/kUsa6wy/hmJbSO3jUFUy5DPO0MCs=) 3: 91C6B644DD6D84839ED120FBC00984D60495C8C4.crl (hash: oVg0rVVoKET2XEvrAdthpdvReH41HD3LMH24l1T/YGk=) 4: 3131342e36362e302e302f31392d3139203d3e20313336313838.roa (hash: P8qLBPMnoAI1K0C1HPD2wJZI0UZcqPIHED6vslCCU3s=) 5: 3131342e36362e302e302f31382d3138203d3e20313336313838.roa (hash: Yb8gU6u81C04/TNC3HgfUU3F68fZCxHkkZH6KDU/qSY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:cd:38:8a:5f:7b:0f:39:37:55:7d:4b:c7:e3:02:18:cc:81:e5:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Validity Not Before: Apr 13 06:18:29 2026 GMT Not After : Apr 14 08:35:29 2026 GMT Subject: CN=01C651AE00E9CE36C67EC70844380F308A5D4404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d1:91:5e:64:ad:e8:d8:a7:ee:03:d2:53:28: 5a:61:5f:03:a7:ac:55:52:d4:35:92:cc:bd:54:5f: dd:9a:f3:93:02:bf:cf:a9:d3:2b:b9:8b:e3:08:ee: b3:a8:e6:eb:ee:d9:d1:5a:88:0d:ce:67:40:9e:eb: 3d:b0:8f:76:f1:87:3f:dc:35:e1:51:ed:e9:cb:8f: 77:07:3c:8f:8c:8d:36:07:4a:4c:c0:b5:86:82:0f: 73:24:34:7b:d4:5f:fb:07:6c:26:5d:23:5e:62:3b: 2b:1c:55:67:86:fa:32:ff:55:37:24:17:1d:f0:c9: 83:5b:97:bf:2e:ef:d4:99:08:30:bd:ae:c7:b5:44: 5c:f1:7e:1e:f2:16:50:ee:2e:fd:36:2c:9b:6d:ea: d9:8e:f2:6f:69:ad:a5:b3:1a:bc:10:d9:e7:f4:5e: db:73:e1:18:ef:16:34:f7:f7:2e:ff:fc:77:40:4e: 04:6f:d4:a5:ba:38:c8:af:fa:97:fa:36:2f:18:ed: f2:9e:fa:9b:3d:c8:39:1f:07:66:ad:8d:96:dd:71: c3:38:95:e6:65:13:31:2c:7d:cd:fd:f5:c3:4b:dd: 87:27:df:e7:f2:a9:8f:e1:0e:1d:8d:52:e5:20:98: 74:c9:04:c9:c7:49:5f:94:f8:7e:40:40:e3:3c:6b: 1e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C6:51:AE:00:E9:CE:36:C6:7E:C7:08:44:38:0F:30:8A:5D:44:04 X509v3 Authority Key Identifier: keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:fc:a3:eb:47:0d:d4:b3:90:df:8d:77:53:bb:19:05:cb:f8: 5f:0f:58:45:37:f0:40:c9:f0:cd:93:ef:84:0e:53:77:46:64: 7a:81:39:21:e7:ce:8a:bd:22:86:b6:d7:9d:55:de:d9:7a:19: 84:51:2c:44:d5:ba:d7:57:df:e1:d5:1d:e7:15:a9:67:7d:27: d6:2c:e4:90:49:7a:41:8a:05:9b:f0:61:b7:a0:53:4a:37:2c: 21:05:bc:e5:1e:43:2d:8e:bf:3c:77:48:c2:bf:0e:53:66:ac: 10:d6:fe:ff:8b:a6:e8:8b:3e:c4:30:5e:c6:90:22:d3:e1:6a: a2:d2:83:c3:a2:03:5d:bc:1f:68:24:91:c6:0d:ad:d7:3e:9e: 26:91:6f:4c:a8:45:ac:c5:8f:65:0a:1d:0f:06:59:83:80:c3: ed:b5:b5:48:07:2b:d1:e0:a2:8e:06:1b:c1:94:1a:66:8d:70: fa:d2:65:0a:f5:04:45:19:f6:76:1b:52:29:14:c4:9b:2d:fd: ea:09:94:60:40:7b:a9:77:76:07:67:cb:f8:19:11:f4:19:4f: 30:df:0d:bb:f9:26:a7:18:42:de:5b:e5:98:0a:74:19:ed:63: 7d:38:d2:93:66:cf:af:b9:ac:bb:d2:49:f7:9a:8c:35:f6:bd: c7:da:6a:a4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUe804il97Dzk3VX1Lx+MCGMyB5d8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw NDk1QzhDNDAeFw0yNjA0MTMwNjE4MjlaFw0yNjA0MTQwODM1MjlaMDMxMTAvBgNV BAMTKDAxQzY1MUFFMDBFOUNFMzZDNjdFQzcwODQ0MzgwRjMwOEE1RDQ0MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs0ZFeZK3o2KfuA9JTKFphXwOn rFVS1DWSzL1UX92a85MCv8+p0yu5i+MI7rOo5uvu2dFaiA3OZ0Ce6z2wj3bxhz/c NeFR7enLj3cHPI+MjTYHSkzAtYaCD3MkNHvUX/sHbCZdI15iOyscVWeG+jL/VTck Fx3wyYNbl78u79SZCDC9rse1RFzxfh7yFlDuLv02LJtt6tmO8m9praWzGrwQ2ef0 Xttz4RjvFjT39y7//HdATgRv1KW6OMiv+pf6Ni8Y7fKe+ps9yDkfB2atjZbdccM4 leZlEzEsfc399cNL3Ycn3+fyqY/hDh2NUuUgmHTJBMnHSV+U+H5AQOM8ax5JAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAcZRrgDpzjbGfscIRDgPMIpdRAQwHwYDVR0j BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4 NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU4OTA5ODUyMjY4NjI1OTUvMC85MUM2QjY0NERENkQ4 NDgzOUVEMTIwRkJDMDA5ODRENjA0OTVDOEM0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUvyj60cN1LOQ 3413U7sZBcv4Xw9YRTfwQMnwzZPvhA5Td0ZkeoE5IefOir0ihrbXnVXe2XoZhFEs RNW611ff4dUd5xWpZ30n1izkkEl6QYoFm/Bht6BTSjcsIQW85R5DLY6/PHdIwr8O U2asENb+/4um6Is+xDBexpAi0+FqotKDw6IDXbwfaCSRxg2t1z6eJpFvTKhFrMWP ZQodDwZZg4DD7bW1SAcr0eCijgYbwZQaZo1w+tJlCvUERRn2dhtSKRTEmy396gmU YEB7qXd2B2fL+BkR9BlPMN8Nu/kmpxhC3lvlmAp0Ge1jfTjSk2bPr7msu9JJ95qM Nfa9x9pqpA== -----END CERTIFICATE-----Generated at Mon Apr 13 11:02:08 2026 by rpki-client